Conversation

Notices

1. Embed this notice
   Kevin Beaumont (gossithedog@cyberplace.social)'s status on Sunday, 11-Oct-2026 01:24:12 JST Kevin Beaumont

   RE: https://infosec.exchange/@BleepingComputer/117417043223385492

   There’s so much missing in these reports, which vendors are missing out.

   Eg the main ‘attack’ was on a bank portal which had no form of MFA (at all). They also scraped the customer records by changing the account number in the URL.

   • Embed this notice
     Kevin Beaumont (gossithedog@cyberplace.social)'s status on Sunday, 11-Oct-2026 01:27:17 JST Kevin Beaumont

     in reply to

     ARTEX AI has been pulled off GitHub. I still have it. It’s a bag of shite.

     It enumerates domains using subfinder, assets using nmap etc. It’s very basic, just a chain of open source projects.

     It has hardcoded creds which allows anybody to use the webapp remotely.

     It’s basically like being hacked by somebody off DALnet in 1998.

   • Embed this notice
     Kevin Beaumont (gossithedog@cyberplace.social)'s status on Sunday, 11-Oct-2026 01:29:42 JST Kevin Beaumont

     in reply to

     I’m starting to think everybody having financial and personal interests in portraying GenAI as an unstoppable monster isn’t a good idea.